Resources

Gus Serino, a water-sector cybersecurity expert and president of I&C Secure, provided critical insights into the vulnerabilities of water utilities in the wake of a cyberattack on a Texas water facility. Serino emphasized the need for addressing basic cybersecurity measures to prevent such incidents, highlighting the regulatory gaps that leave water systems exposed to adversaries.

Gus Serino, a water-sector cybersecurity expert and president of I&C Secure, provided critical insights into the vulnerabilities of water utilities in the wake of a cyberattack on a Texas water facility. Serino emphasized the need for addressing basic cybersecurity measures to prevent such incidents, highlighting the regulatory gaps that leave water systems exposed to adversaries.

Gus Serino, founder of cybersecurity firm I&C Secure and a former staffer at a water utility and infrastructure cybersecurity firm Dragos, has played a pivotal role in analyzing and understanding the recent cyberattacks on US and European water utilities. Serino’s expertise has been crucial in deciphering the hackers’ methods and intentions. He noted that while the hackers displayed some knowledge of water utility systems, their actions often appeared random and uninformed.

Find out what takes to solve some of the world’s seemingly impossible problems. In each episode, SEAL Team 6 veteran and “Cleared Hot” podcast host Andy Stumpf interviews a new “agent of change” who is enacting real change to understand the scope of their work, how it can be replicated, and the unimaginable stakes of their everyday lives.

Gus joins CNN’s Ed Lavandera to discuss an incident in Texas where a cyberattack compromised their water system. Experts blame Russia and the FBI is investigating.

Gus joins Dale Peterson on his podcast to discuss the ICS/OT cybersecurity of the drinking water industry.

Gus was able to deliver a talk on the guiding principles for implementing a secure remote access architecture for ICS/OT environments. He presented this information at the SANS ICS Sumit as well as WaterISAC’s H20SecCon Conference in 2022 and in 2023.

At the SANS ICS Summit in 2022, Gus discusses how organizations can add resilience and validation to monitoring of critical process parameters utilizing data loggers and out-of-band communications. The solution can help organizations identify when their primary control system is not accurately reporting field measurements including when being manipulated via cybersecurity incidents.

At the SANS ICS Summit in 2021, Gus Serino and Andrew Hildick-Smith discuss how organizations can utilize modifications to their control and monitoring systems to add operational resilience and limit potential impacts of cybersecurity incidents.

Gus joins Tim Conway, Andrew Hildick-Smith, and Christopher Walcutt to ICS/OT cybersecurity within the water and power industries.

Gus joins Don C. Weber on his ICS/OT Cybersecurity Fireside Chat series to discuss out of band monitoring of critical process control signals.

Gus joins Don C. Weber on his ICS/OT Cybersecurity Fireside Chat series to discuss the Oldsmar Water Cybersecurity incident.